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SPECIFICATION 



TITLE OF INVENTION 
PORT HOPPING 

FIELD OF THE INVENTION 
[0001] The present invention relates to computer software. More particularly, the 

present invention relates to server computer software for network applications. 

BACKGROUND OF THE INVENTION 
[0002] In a network setting, a user accesses other computer networks through 

various network components. In particular, mobile computer users may want to access 
the Internet from tiieir room in a hotel, an office building, or an airport concourse. As 
part of a solution to provide users with broadband services, a Building Broadband Service 
Manager (BBSM) may be deployed in a building for plug-and-play access, 
authentication, and billing. 

[0003] Such BBSM requires a user to authenticate when activating a session with 

the user computer connected to a port. The port may for example be an ethemet jack, a 
wireless access point, or a cable modem. In the case of a vdreless access point, a user 
may activate a session with an access code policy using wireless LAN equipment - the 
wireless access point. The BBSM associates a port with the session. When the user 
moves from a first access point to a second access point, the link quality or the signal 
strength as seen by the furst access point decreases as the user moves away from the first 
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access point. The BBSM eventually deactivates the user's session as the end user 
disassociates from the access point. When the user moves closer to the second access 
point, the link quality as seen by the second access point increases, and the BBSM re- 
associates the end user with a new port. The user must re-authenticate to gain access to 
the Internet 

[0004] FIG. 1 illustrates a flow diagram of a software of a BBSM as described 

above. In block 102, the BBSM scans for active sessions. If the BBSM finds an active 
session, the BBSM queries the network element for that active session m block 104 and 

0 detects whether the session is still active in block 106. BBSM deactivates the session in 

i 

block 108 if the network element does not find the user associated with the port. 
Otherwise, the BBSM advances to the next active session in block 1 10. 



m 



[0005] A need therefore exists for a method and device that seamlessly maintains 

^ the user ' s session as the user moves from one port to another and does not require the end 
user to re-authenticate. A primary purpose of the present mvention is to solve these 
needs and provide further, related advantages. 
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RT?TRF nKS CRIPTION OF THE INVENTION 
[0006] An algorithm and a device manage a feature that allows a user to maintain 

an active session when moving from port to port. The device comprises a first memory, a 
second memory, and a verifier. The first memory stores a list of ports. The second 
memory stores a list of active sessions. Each active session identifies a port on which a 
user is connected. The verifier communicates with the fnst memory and the second 
memory and periodically checks each session in the list of active sessions. If a session is 
inactive, the verifier searches for the user on other ports. If the verifier identifies the user 
on another port, the verifier updates the list of active sessions with the user identified on 
that other port. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
[0007] The accompanying drawings, which are incorporated into and constitute a 

part of this specification, illixstrate one or more enxbodiments of the present invention 
and, together with the detailed description, serve to explain the principles and 
implementations of the invention. 
[0008] In the drawings: 

FIG. 1 is a flow diagram for a method for managing sessions in a Building 
Broadband Service Manager (BBSM) application software according to a prior art; 

FIG. 2A is a flow diagram for a method for maintaining an active session 
for a user changing ports according to a specific embodiment of the present invention; 

FIG, 2B is a flow diagram for a method for maintaining an active session 
for a user changing ports according to an altemative embodiment of the present 
invention; 

FIG. 3 is a block diagram of a device for maintaining an active session for 
a user changing ports according to a specific embodiment of the present invention; 

FIG. 4 is a block diagram of core modules of a software for maintaining 
an active session for a user changing ports according to a specific embodiment of the 
present invention; 

FIG. 5 is a block diagram of user interface components for a software for 
maintaining an active session for a user changing ports according to a specific 
embodiment of the present invention; 

FIG. 6 is a screen shot illustrating a port hopping delay time setting 
according to a specific embodiment of the present invention; 
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FIG. 7 is a screen shot illustrating a port hopping control setting for all 
ports according to a specific embodiment of the present invention; 

FIG. 8 is a screen shot illustrating a port hopping control setting for a 
specific port according to a specific embodiment of the present invention; 

FIG. 9 is a screen shot illustrating a transaction history report of port 
hopping according to a specific embodiment of the present invention; and 

FIG, 10 is a block diagram of data structures for software for maintaining 
an active session for a user changing ports according to a specific embodiment of the 
present invention. 
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DETAILED DESCRIPTION 
[0009] Embodiments of the present invention are described herein in the context 

of a port hopping. Those of ordinary skill in the art will realize that the following 
detailed description of the present invention is illustrative only and is not mtended to be 
in any way limiting. Other embodiments of the present invention will readily suggest 
themselves to such skilled persons having the benefit of this disclosure. Reference will 
now be made in detail to implementations of the present invention as illustrated in the 
accompanying drawings. The same reference indicators will be used throughout the 
drawings and the following detailed description to refer to the same or like parts. 

[0010] In the interest of clarity, not all of the routine features of the 

implementations described herein are shown and described. It will, of course, be 
appreciated that in the development of any such actual implementation, numerous 
implementation-specific decisions must be made in order to achieve the developer's 
specific goals, such as compliance with application- and business-related constraints, and 
that these specific goals will vary from one implementation to another and fi'om one 
developer to another. Moreover, it will be appreciated that such a development effort 
might be complex and time-consuming, but would nevertheless be a routine undertaking 
of engineering for those of ordinary skill in the art having the benefit of this disclosure. 

[0011] In accordance with the present invention, the components, process steps, 

and/or data structures may be implemented using various types of operating systems, 
computing platforms, computer programs, and/or general purpose machines. In addition, 
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those of ordinary skill in the art will recognize that devices of a less general purpose 
nature, such as hardwed devices, field programmable gate arrays (FPGAs), application 
specific integrated circuits (ASICs), or the like, may also be used without departing from 
the scope and spirit of the inventive concepts disclosed herein. 

[0012] A port may be a jack into which a user connects a computer to gain 

Internet access. In the case of a wireless network element, such as an access point, a port 
is a virtual jack. A session is the set of interactions that a user has with a Building 
Broadband Service Manager (BBSM). An active session allows the user to access the 
Internet through the port. Port hopping as defined by the present invention allows a user 
to maintain the active session when moving from port to port. 

[0013] When a user attempts to access other computer networks, such as the 

Internet, the BBSM to which the user is connected searches a configured Ust of network 
elements or network connectivity devices (e.g. Ethernet switches, wheless access points, 
etc. . .) to determme the port on which the user is associated. The BBSM then challenges 
the user to authenticate. If the user successfiilly authenticates, the BBSM activates a 
session assigned to that specific port. Periodically, the BBSM queries the assigned port 
to determine if the session is no longer active. 

[0014] The present invention allows a session to remain temporarily active when 

a user is no longer associated with a port. If the user re-associates with the same port or a 
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different port, the active session continues uninterrupted. If the user does not reappear on 
the network after a configurable delay, the session is deactivated. 



[0015] FIG. 2A illustrates a flow diagram for a method for maintaining an active 

session for a user changing ports accordmg to a specific embodiment of the present 
invention. As previously described, the BBSM periodically scans for active sessions in 
block 202. If a session is found to be active the BBSM first queries whether a port hop is 
m progress in block 204. A port hop is in progress after the BBSM disassociates a 
session from one port and before the BBSM associates a session with a new port. When 
no port hop is in progress, the BBSM queries a network element associated with an active 
session in block 206. 

[0016] In the decision block 208, the BBSM detects wheHier the session is still 

active - that is whether the user is still associated with the port listed in the session 
variables. If the session is still active, the BBSM advances to the next active session in 
block 230, otherwise the BBSM starts a port hop timer in block 210. The port hop timer 
is an adjustable delay timer that is discussed in more detail below. Once the timer is 
started, the BBSM queries the network element that was last connected with the user in 
block 212. If the user is found at the last connected network element in block 214, the 
BBSM records the port hop in a transaction history for the user in block 216. The session 
variables are then updated to reflect the port on which the user is located and the session 
is kept active in block 218. If the user is not found at tiie last connected network element 
in block 214, the BBSM queries all network elements for the active session in block 220. 
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A user is identified on a port with its MAC address. Because eacli Media Access Control 
(MAC) address is unique, the BBSM is able to identify any user. 



[0017] If the user is not found at another port in block 222, the BBSM advances 

to the next active session in block 230 in the case where there may be some time delay 
between disassociating from the source port and re-associating with the destination port. 
The BBSM periodically searches for the user until the port hop timer expires at block 
232. If, after repeatedly searching for the user until the port hop timer expires, the BBSM 
still has not detected the user, then the BBSM deactivates the session in the fruition 
from block 232 to block 226. After the BBSM reports the session duration in block 228, 
the BBSM advances it query to the next active session in block 230 and loops back to the 
decision block 202. In the case that the user does not appear on any network element 
after the expiration of the port hop timer, the session duration may not include time spent 
searching for the user. 

[0018] If the user is identified on another port in block 222, the BBSM then 

records the port hop in a transaction history in block 216. 

[0019] If a port hop is in progress in block 204, the BBSM then queries whether 

the port hop timer started in block 21 0 has expfred in block 232. If tiie port hop timer has 
not expired, the BBSM proceeds to query all network elements for the active session in 
block 220. Otherwise, the BBSM proceeds with deactivating the session in block 226, 
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since the user has vanished from all ports for the duration of the port hop timer. When no 
more sessions are found active, the BBSM ends its periodic query in block 234. 



[0020] In an alternative embodiment illustrated in FIG. 2B, if the user is 

identified on another port in block 222, the BBSM then verifies whether the user is port 
hopping between different sites in block 224. The BBSM does so by comparing the site 
number associated with the source port and the site number associated with the 
destination port in block 224. When the BBSM determines that the user is hopping ports 
between different sites, the BBSM deactivates the session in block 226 and reports the 
session duration in block 228. It may be possible for an end user to hop from the original 
site to another site and then back to the original site within the duration of the port hop 
delay. In this case, the BBSM deactivates the session even though the end user 
eventually hopped back to an allowed port. At the time the BBSM finds the end user on 
the disallowed port, the BBSM cannot know that the end user may hop back to Uie 
original site, and the BBSM may prevent inter-site port hopping in the alternative 
embodiment illustrated in FIG. 2B, so the BBSM deactivates the session. 

[0021] FIG. 3 illustrates a block diagram of a device for maintaining an active 

session for a user changing ports according to a specific embodiment of the present 
invention. A device 302, more particularly, a network connectivity device, comprises a 
first memory 304, a second memory 306, and a verifier 308. The first memory 304 stores 
a list of ports, for example, Port_Map Table 1004 as illustrated in FIG. 10. The second 
memory 306 stores a list of active sessions, for example, Port_State Table 1006 as 
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illustrated in FIG. 1 0. Each active session identifies a port on which on a user is 
connected. In addition, each session comprises several variables such as the MAC 
address of the user, the IP address, and port policy. Other variables may also be included. 
An optional third memory 307 may store a list of sites, for example, Sites Table 1008 as 
illustrated in FIG. 1 0. The verifier 308 may be a software that communicates with the 
first memory 304, the second memory 306, and optionally the third memory 307. The 
verifier 308 periodically checks each active session in the list of active sessions provided 
by the second memory 306. If the port associated with a session indicates that the session 
is no longer active, tiie verifier 308 searches all other ports to determine a new location 
for the user. If the user is identified on another port (and the port hop is allowed), the 
verifier 308 updates the variables of the active session m the second memory 306 to 
record the new port location and to record the port hop event. In this case, the verifier 
308 does not require the user to re-authenticate, making the port hop seamless for the 
user. If the verifier 308 does not find the user on the other ports, the verifier 308 repeats 
the search on the other ports until a configurable delay expires. In particular, the 
configurable delay may be an adjustable timer. At the expiration of such configurable 
delay, the verifier 308 deactivates the user's session and updates the second memory 306 
to represents the session deactivation. 

[0022] In addition to mamtainmg the current location of tiie session, the device 
302 also records the port hop history of the user m a transaction log. By examining such 
transaction log, an admmistrator can track the mobility of tiie user. The device 302 also 
remembers the original location of the session throughout the life of the session. The 
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original location of the session detemines several policies applied to the session, and 
these policies follow the session for its lifetime. The verifier may also communicate with 
the third memory 307 to disallow the user to hop between different sites when such 
option is implemented, 

[0023] FIG. 4 illustrates a block diagram of core modules of a software for 

maintaining an active session for a user changing ports according to a specific 
embodiment of the present invention. For illustration purposes, the following provides an 
example of an implementation of the present invention using several software modules. 
The BBSM Core modules 402 may comprise: AtDial modules 404, AtNotify modules 
406, Generic Switch modules 408, and IPORT Core modules 410. 

[0024] The AtDial modules 404 may comprise the following functions: 

ffiddenWnd::OnTimer fimction 412, HiddenWnd::AtDialThread fiinction 414, 
HiddenWnd::OnSearchResultMsg ftmction 416, 

HiddenWnd::LaunchAtDialSearchThread fimction 418, ffiddenWnd::ClientSearch 
function 420, HiddenWnd::CompletePortHop fimction 422, 
HiddenWnd::TumOfiEPortHopInProgress fimction 424. 

[0025] The HiddenWnd::OnTimer fimction 412 may run once per minute. The 

fimction performs many periodic tasks within BBSM, including a query of the network 
element associated with each active session to determine if the network element thinks 
the session is still active. Prior to the present invention, if the network element claimed 
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that the session was no longer active, the OnTimer function deactivated the session. 
According to a specific embodiment of the present invention, this function performs the 
algorithm described in FIG. 2 allowing BBSM to maintain the session as it moves firom 
network element port to network element port, providing mobility to the user. 

[0026] The HiddenWnd: : AtDialThread function 414 is part of the algorithm 

described in FIG. 2. This function performs a search, for example, an asynchronous 
search, of all network elements when the HiddenWnd: :OnTimer function 412 determines 
tiiat a session is no longer associated with its last known network element. The purpose 
of the search is to discover the network element port to which tiie session moved (if any). 
If it successfully finds the session on a network element port, this function posts a 
completion message to the main thread. Otherwise, this function posts a search failure 
message to the main thread. 

[0027] The HiddenWnd: rOnSearchResultMsg function 416, which is part of the 
main thread, processes the completion or search failure message fi:om the 
HiddenWnd:: AtDialThread function 414. If the message is a completion message, this 
function updates the appropriate state variables to record the new location (network 
element port) of the user. The exception to this case occurs if the session moves firom site 
to site. Since the BBSM administratively may disallow an inter-site port hop, the 
function may deactivate the session in that case. If the message is a search failure 
message and tiie search time is expired, the function deactivates the session. 
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[0028] The HiddenWnd::LaunchAtDialSearchThread function 418 is called by 

the HiddenWnd::ClientSearch function 420 to launch the HiddenWnd::AtDialSearch 
thread function 418 in a separate thread of execution. 

[0029] The HiddenWnd: :ClientSearch function 420 is called by the 

HiddenWnd::OnTimer function 412 when the last known network element associated 
with a session reports that the session is no longer active. This function attempts to 
locate the client on a new network element. 

[0030] The HiddenWnd: :CompletePortHop function 422 updates the session state 

v^iables to record a successful port hop. This method invokes the 

HiddenWnd: :TumOffPortHopInProgress function 424 to perform additional clean up. 

[0031] The HiddenWnd::TumOffPortHopInProgress function 424 updates the 

port state table to indicate that the BBSM is not processing a port hop. Various functions 
invoke this function to indicate that a session is no longer in the transient port hop in 
progress state. 

[0032] The AtNotify modules 404 may comprise the following functions: a 

NotifyBilling::GetMACnPort function 426 and a NotifyBiUing:: AtNotify SearchThread 
function 428. 
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[0033] The NotifyBilling: :GelMACnPort function 426, which runs when a new 

user attempts to access Ihe Internet, determines the MAC address and network element 
port (i.e., location) of the new user. This function establishes the initial network element 
and port that the BBSM will associate with the session. The HiddenWnd::OnTimer 
function 412 will query the network element established by this function periodically to 
determine if the end user moved to another network element port. This function may also 
invoke the NotifyBilling: :AtNotifySearchThread function 428 to determine the network 
element port of the new user. 

[0034] The NotifyBilling: : AtNotifySearchThread fimction 428 performs a similar 

fiinction to the HiddenWnd::AtDialThiead function 414, but it runs only when a new user 
appears on the network, prior to session activation. This fimction establishes the initial 
location of the new user before the user activates the session. 

[0035] The Generic Switch modules 408 may comprise the following: a 

CEtherStack::SearchNetworkElements function 430, a CEtherStack::AddPortMap 
function 432, a CEtherStack::AddPortMapEntry function 434, and a 
CEtherStack::AddDefaultPortMap function 436. 

[0036] The CEtherStack::SearchNetworkElements function 430 performs a query 

of each network element firom a set of network elements (typically all network elements 
associated with a given router, but sometimes only one network element) to determine 
which network element and port a session is using. Both the 
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NotifyBilling::AtNotifySearch Thread function 428 and the HiddenWnd::AtDialThread 
function 414 invoke this function to perform liie low-level task of querying each network 
element in the set. 

[0037] The CEtherStack: : AddPortMap function 432, 
CEtherStack::AddPortMapEntry function 434, and CEtherStack: :AddDefaultPortMap 
function 436 may add a port hop flag to the Port_Map table 604, which is also illustrated 
in FIG. 3 as the first memory 304. 

[0038] The IPORT Core modules 4 1 0 may comprise the following: a 

PortRecordSet class 438, a PortStateUtil class 440, a PortMapRecordSet class 442, a 
PortMapUtil class 444, and a SitesRecordSet function 446. 

[0039] The PortRecordSet class 438 and PortStateUtil class 440 provide access to 

the Port_State table 606, is also illustrated in FIG. 3 as the second memory 306. 
The PortMapRecordset class 442 and the PortMapUtil class 444, which together 
represent the furst memory 304, are modified for the new EnablePortHop flag. The 
SitesRecordSet function 446 provides an additional column to the Sites table 608, which 
is illustrated in FIG. 3 as the third memory 307, to regulate the duration of the port hop 
timer. 

[0040] FIG. 5 is a block diagram of user mterface components according to a 

specific embodiment of the present invention. The BBSM in FIG. 2 provides an 
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administrator with an interface to monitor and control the sessions with a Dashboard 
application 502 as used for example in a Building Broadband Service Manager (BBSM). 
The Dashboard application 502 may comprise the following components: an 

Administration appHcation 504, an Operations application 506, a Reports application 
508. 

[0041] In the administration application 504, an administrator may control the 

port hop parameters through a WEBconfig 510 page as illustrated in FIGS. 6 and 7. The 
WEBconfig may comprise a Sites page 512 and a Port Map page 514. The Sites page 
5 12 may provide a text box 602 in FIG. 6 that allows an administrator to configure the 
port hop delay. The field will have a vaUdation for values fi-om 1 to 60 minutes with 
default of 20 mmutes. The Port Map page 514 may provide a check box 702 m FIG. 7 
that allows the administrator to enable or disable the port hop flag for all ports. The 
default value is disabled. 

[00421 The operation application 506 may comprise a Port Control Web page 5 1 6 

as illustrated in FIG. 8. The Port Control Web page 516 may comprise a check box 802 
m FIG. 8 that allows the administrator to enable or disable the port hop flag for specific 
ports. 

[0043] The Reports application 508 comprises a Transaction History table 5 1 8 as 

illustrated in FIG. 9. Each time a port hop event occurs, an entry is made into the 
Transaction History report 518. A Date/Time column 902 records the date and time at 
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which the port hop completed. A Transaction type column 904 displays the type of port 
hop transaction that occurred. The possible types comprise port hop started, port hop 
completed, port hop failed - attempt to hop to another site, and port hop time exphed - 
deactivating session. An IP column 906 records the IP address of the client who hopped. 
A Previous column 908 displays the previous state of the session as active or inactive. A 
New column 910 displays the new state of the session as active or inactive. The Amount 
column 912 displays the monetary amount of the port hop. Since the BBSM does not bill 
for the port hop, the transaction Amount column 912 remains at a zero value. A PortID 
colunm 914 records the destination port. If the user hops to the same port, this column 
has the same value as the source port. A MAC Address column 916 records the MAC 
address of the user who hopped. A Room column 918 records the room number 
associated with the destination port. A Duration column 920 records the duration of the 
session of a user at a port. A Bandwidth column 922 records the bandwidth Umit (in 
kilobits per second) applied to the session. More columns may be included such as an 
Access Policy/Accounting Policy column (not shown) for recording tiie access policy and 
tiie accounting policy in use by the session. Since the policies follow the session from 
port to port, the value of these columns will be the same as tiie original policies recorded 
at session activation. 

[0044] FIG. 1 0 illustrates an example of data structures for a software for 

maintainmg an active session for a user changing ports according to a specific 
embodiment of tiie present invention. The data stiiictures 1002 may comprise, for 
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example, a Port_Map table 1004 stored in the first memory 304, a Port_State table 1006 
stored in the second memory 306, and a Sites table 1008 stored in the third memory 307. 



[0045] The Port_Map table 1 004 may be modified to add an EnablePortHop 

column (not shown) for indicating whether a port is allowed to hop. 

[0046] The Port_State table 1 006 may be modified to add an OriginalPortID 

column (not shown), an OriginalRoom column (not shown), and a PortHopInProgress 
column (not shown). The OriginalPortE) and the OriginalRoom columns are used to 
activate the session. The PortHopInProgress indicates whether a port hop is in progress. 
If the value is Null, there is no port hop in progress. Otherwise, the value is the time at 
which the client will be deactivated if the port hop is not completed. 

[0047] The Sites table 1 008 may be modified to add the number of minutes to 

elapse before deactivating the user. 

[0048] Thus, when a session hops ports, there are two ports involved: the source 

port and the destination port. Each port stores a port hop flag in the Port_Map table 604, 
indicating if the port, when acting as a source port, allows a session to hop from the port 
to another port. When the administrator generates the port map page 514 using 
. WEBconfig 510, the port hop flag is set for all ports. To individually enable or disable 
ports, tiie administrator will use the Port Control web application, accessible through the 
BBSM Dashboard 502 in the Port Control Web page 516. 
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[0049] While embodiments and applications of this invention have been shown 

and described, it would be apparent to those skilled in the art having the benefit of this 
disclosure that many more modifications than mentioned above are possible without 
departing fi-om the inventive concepts herein. The invention, therefore, is not to be 
restricted except in the spirit of the appended claims. 
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